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1  Introduction 


Background 

The  possibility  that  some  computer  systems  may  not  correctly  recognize  dates 
after  31  December  1999  (the  much  publicized  “¥21^  computer  phenomenon)  may 
cause  significant  problems  for  embedded  systems  at  U.S.  Army  installations. 
Installations  and  vendors  have  been  working  to  correct  this  problem  in  software 
systems  for  several  years.  However,  while  much  work  has  been  done  to  prevent 
failure  of  information  systems,  the  effort  to  find  and  correct  this  problem  in  con¬ 
trol  systems  using  embedded  chips  did  not  start  as  early.  Consequently,  control 
systems  may  fail,  reducing  the  reliability  of  installation  heating  and  cooling 
plants. 


Objectives 

The  objectives  of  this  study  were  to: 

•  help  identify  embedded  chip  equipment  and  common  manufacturers  of  con¬ 
trol  equipment  that  may  fail  around  the  year  2000 

•  supply  internet  links  and  contact  points  for  equipment  manufacturers 

•  provide  the  status  of  Y2K  compliance  for  common  equipment. 


Approach 

Research  was  conducted  on  heating  and  cooling  equipment  systems  that  may 
have  date-time  functions.  Information  was  collected  from  public  postings  on  the 
Internet,  interviews  with  installation  personnel,  interviews  with  equipment 
manufacturers,  and  heating  system  operators. 


Mode  of  Technology  Transfer 

The  results  of  this  research  will  forwarded  to  the  Corps  of  Engineers  Installation 
Support  Center,  Alexandria,  VA  (CEISC),  the  Assistant  Chief  of  Staff  for  Instal¬ 
lation  Management  (ACS[IM]),  the  General  Services  Administration  (GSA),  and 
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installation  personnel  identified  in  this  study,  to  help  installation  maintenance 
personnel  locate  the  needed  tools  to  prepare  utility  systems  for  the  Y2K  date 
register  rollover. 
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2  Explanation  of  Year  2000  Problem 


Until  the  mid-1990’s,  it  was  common  practice  to  use  only  the  last  two  digits  of  a 
year  to  represent  a  date.  For  example,  the  computer  recognizes  the  current  year 
(1999)  as  “99”  when  performing  any  date-based  function.  This  representation  of 
the  year  causes  no  problems  as  long  as  the  dates  all  occur  in  the  20“*  Century. 
However,  when  the  calendar  turns  over  to  the  year  2000,  the  computer  will  view 
the  year’s  two-digit  as  the  number  “00”  —  a  number  with  a  value  less  than  the 
number  “99.” 

The  turnover  to  the  year  2000  was  not  considered  when  many  existing  systems 
were  designed  simply  because  the  systems  were  not  expected  to  last  this  long. 
However,  many  Y2K-noncompliant  hardware  and  software  systems  are  still  in 
use  and  may  experience  major  malfunctions  as  1999  changes  to  the  year  2000. 
The  Y2K  Problem  will  affect  energy  systems  in  two  ways: 

•  Data  arranged  by  date  will  no  longer  be  arranged  in  the  correct  sequential 
order.  For  example,  dates  identified  with  the  year  “01”  will  be  ambiguous. 
They  will  refer  to  both  1901  and  2001.  Information  aissociated  with  the  year 
2001  will  most  likely  be  stored  incorrectly  as  information  associated  with  the 
year  1901. 

•  The  year  2000  is  a  leap  year.  According  to  the  Institution  of  Electrical  Engi¬ 
neers  (lEE)  [http://www.iee.org.uk/2000risk/w-73.htm]: 

Almost  as  important  ...  is  that,  in  many  cases,  algorithms  used  to  calcu¬ 
late  whether  a  year  is  a  leap  year  are  wrong,  and  produce  the  result  that 
Year  2000  is  not  a  leap  year,  although  in  fact  it  is.  Other  errors  result  in 
Year  1900  being  treated  as  a  leap  year,  when  in  fact  it  is  not;  and  some 
systems  omit  any  provision  for  leap  years.  In  consequence  their  calendar 
calculations  are  wrong. 
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3  Heating  and  Cooling  System 
Automation 

Definition  of  Embedded  Systems 

Most  modem  heating  and  cooling  systems  employ  embedded  technology  to  con¬ 
trol  and  operate  the  system.  The  Institution  of  Electrical  Engineers  (EEE) 
[httpy/www.iee.org.uk/2000risk/]  defines  embedded  systems  as:  “devices  used  to 
control,  monitor  or  assist  the  operation  of  equipment,  machinery  or  plant.  ‘Em¬ 
bedded’  reflects  the  fact  that  they  are  an  integral  part  of  the  system.”  In  most 
systems,  the  controller  may  be  so  integral  to  a  system  or  piece  of  equipment  that 
its  presence  is  not  obvious  to  the  casual  observer.  Even  technicians  familiar  with 
embedded  technology  might  need  to  study  the  equipment  in  operation  for  some 
time  before  being  able  to  determine  that  an  embedded  control  system  is  involved 
in  its  functioning.  On  the  other  hand,  a  computer  used  to  control  the  overall  op¬ 
eration  of  a  plant  obviously  employs  embedded  chips. 

An  embedded  system  must  contain  a  computer  or  microprocessor.  However, 
many  of  these  processors  are  very  simple  systems  as  compared  to  personal  com¬ 
puters. 


Embedded  Technology  in  Heating  and  Cooling  System  Automation 

The  term  “automation”  implies  a  system  with  embedded  controls.  These  controls 
may  range  in  size  and  complexity  firom  thermostats  and  gauges  to  main  control¬ 
ling  computers.  However,  all  embedded  control  do  not  necessarily  operate  on  a 
date-time  fimction.  This  means  that  some  automated  systems,  such  a  heating  or 
coohng  system,  will  not  fall  victim  to  the  Y2K  problem.  Therefore,  it  must  be  de¬ 
termined  if  the  controllers  in  a  system  operate  on  a  date-time  fimction  and  if  the 
controllers  will  be  affected  by  the  year  2000.  These  steps  are  outlined  in  Chapter 
5,  “Automated  System  Comphance  Procedure.” 
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4  Effects  of  Date-Time  Function  Non- 
Compiiance 

The  possible  effects  of  date-time  function  non-compliance  in  energy  systems 
range  from  what  would  be  considered  a  “non-event,”  to  a  potential  system  shut¬ 
down,  to  a  (very  unlikely)  catastrophic  failure.  Probable  consequences  of  the 
Y2K  turnover  are:  . 

•  Tests  have  shown  that  programmable  thermostats  will  incur  malfunctions. 
According  to  Systems  Modelling  Ltd.  [http*y/www.iol.ie/sysmod/  sysmod.htm], 
of  three  different  models,  two  stopped  working  when  the  year  2000  rolled 
over.  The  other  model  recorded  the  date  as  1900.  It  is  also  Kkely  that  once  a 
progranunable  thermostat  shuts  down,  it  will  not  start-up  again. 

•  Valves  are  often  remotely  controlled  with  microchips,  which  are  subject  to  the 
Y2K  Problem.  K  a  chip  were  to  fail,  the  valve  would  either  close  completely, 
open  completely,  or  remain  locked  in  the  failed  position.  Regardless,  the 
valve  failiure  could  cause  the  entire  system  to  shut  down  or  to  lose  control. 

•  The  control  console  will  need  to  be  checked  for  date-time  compliance  in  a 
manner  similar  to  checking  a  PC.  A  system’s  main  controls  may  react  simi¬ 
larly  to  the  thermostat.  The  controls  may  stop  working  at  the  Y2K  turnover, 
may  not  restart,  or  may  record  an  incorrect  date.  If  the  console  records  an 
incorrect  date,  the  other  controllers  in  the  loop  may  have  difficiilties  with  the 
date  discrepancy.  This  could  result  in  a  system  lockup  or  shutdown. 

While  the  various  scenarios  for  an  energy  system  are  not  likely  to  produce  cata¬ 
strophic  failures,  loss  of  heating  capabilities  in  the  winter  will  be  inconvenient. 
Also,  note  that  local  utilities  may  not  guarantee  to  provide  reliable  power,  gas,  or 
water  for  a  number  of  days  surroimding  the  Y2K  turnover.  The  Appendix  to  this 
report  contains  a  table  to  track  the  local  utilities’ Y2K  Readiness  progress. 
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5  Automated  System  Compliance 
Procedure 


Six  standard  steps  are  used  to  ascertain  a  system’s  Y2K  Readiness: 


1.  Awareness.  The  year  2000  will  cause  problems  in  some  embedded  systems. 
Energy  systems  are  embedded  ^sterns  with  known  Y2K  failures.  It  is  necessary 
to  continue  with  the  compliance  procedure.  A  team  of  Y2K  trained  specialists, 
consisting  of  engineers,  technicians,  and  programmers,  should  be  assembled  to 
cany  out  the  rest  of  the  Y2K  Compliance  Procedure. 

2.  Inventory.  A  complete  list  should  be  compiled  of  every  device,  piece  of  equip¬ 
ment,  software,  and  hardware  used  by  the  energy  system  —  in  short,  anything 
nging  electricity  or  operating  on  a  battery.  This  list  should  include  the  product 
description,  its  location,  its  manufacturer,  and  its  supplier.  The  lEE’s  Inventory 
Contents  [http:/Avww.iee.org.uk/2000riskAv-104.htm]  shows  a  good  example.  The 
manufacturer  should  also  be  contacted  for  its  Y2K  Compliance  Statement. 

3.  Assessment/Testing.  Every  item  containing  a  microchip  or  processor  must  be 
assessed  and/or  tested  for  Y2K  compliance.  The  lEE  has  established  guidelines 
for  testing,  shown  at  the  website:  httpy/www.iee.org.uk/2000risk/w-155.htm. 
Some  precautions  to  observe  during  testing  are: 

•  Never  run  tests  on  operational  systems:  Sometimes  this  advice  is  imprac¬ 
tical  and  testing  on  real  systems  cannot  be  avoided.  Nevertheless  testing 
on  operational  systems  should  be  carried  out  only  where  there  is  abso¬ 
lutely  no  alternative.  Furthermore,  tests  on  operational  systems  should 
be  performed  only  when  the  controlled  systems  are  “down,”  i.e.,  when 
they  are  non-operational. 

•  Keep  the  testing  separate  from  the  operational  system.  This  applies  to 
hardware,  software,  and  data. 

•  Back  up  all  data  and  software  before  beginning  testing. 

•  Ensure  that  the  operational  system  can  be  restarted.  Do  not  do  anything 
that  might  make  the  next  restart  different  from  the  usual  restart. 

•  Test  core  elements  (the  hardware/software  platform)  before  testing  appli¬ 
cation  software. 

•  Be  aware  of  the  possibility  of  corruption  of  data  arising  from  system  soft¬ 
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•  Ensure  that  the  computing  platform  on  which  tests  are  run  is  identical  to 
the  operational  system. 

•  Ensure  that  all  test  cases  are  covered. 

•  Ensure  that  all  software  modules  are  called  when  the  program  suite  is 
tested. 

•  Keep  the  test  system  and  re-test  at  intervals  that  reflect  operational  cycles. 

•  Ensure  that  the  testing  process  does  not  result  in  licenses  for  software  be¬ 
coming  erroneously  time-expired  or  invalidated  because  of  copying. 

4.  Process  Analysis.  For  the  devices  that  fail,  a  remedial  plan  must  be  devised. 
This  could  involve  replacing  the  microprocessor  altogether  or  simply  nbanging 
the  programming  code.  This  may  involve  contacting  third  party  system  integra¬ 
tors.  The  planned  changes  should  be  tested  before  implementation. 

5.  Implementation.  After  a  remedial  plan  is  implemented,  the  system  shoidd  be 
tested  again.  In  situations  where  the  energy  system  (along  with  other  infrastruc¬ 
ture  systems)  is  controlled  by  a  network,  it  may  be  advisable  to  run  a  “system  of 
systems”  test.  This  type  of  integrated  test  would  nm  all  of  the  remediated  sys¬ 
tems  simultaneously  to  test  system  interaction  with  the  new  code  and  devices. 
The  White  Sands  Missile  Range  [httpy/www.hqda.army.mil/acsimweh/ 
ops/y2kweb.doc]  conducted  such  a  “system  of  systems”  test  in  October  1998.  The 
newly  implemented  system  should  be  closely  monitored  for  performance  anoma¬ 
lies. 

6.  Contingency  Planning.  The  implemented  changes  should  have  averted  any 
Y2K  operational  problems.  However,  it  is  stiU  important  to  create  a  contingency 
plan.  According  to  the  JDEE  [httpy/www.iee.org.uk/200()riskAv-272.htm]: 

The  purpose  of  contingency  planning  is  to  avoid  or  reduce  the  effects  of 
unexpected,  unpredicted  or  unpredictable  failure(s),  by  ensuring  that 
there  is  a  plan  of  action(s)  which  will  be  followed  should  a  failiu’e  occm*. 

It  is  likely  that  in  the  first  instance  the  emphasis  will  be  on  dealing  with 
the  consequences  rather  than  with  the  causal  failures.  Contingency 
planning  will  also  be  concerned  with  the  effects  of  failures  which  are  be¬ 
yond  the  control  of  the  company  affected,  i.e.,  failures  on  the  part  of  sup¬ 
pliers  or,  possibly,  customers. 

Also,  note  that,  even  though  some  suppliers  have  made  a  good  faith  effort  toward 
comphance,  they  will  not  promise  product  reliability  due  to  legal  issues.  There¬ 
fore  a  contingency  plan  must  be  in  place. 
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A  good  contingency  plan  will  also  take  the  local  utilities’  Y2K  readiness  into  con¬ 
sideration.  Although  utilities  report  they  will  be  taking  extra  precautions  to 
place  their  equipment  in  its  most  rehable  condition,  no  utility  has  promised  that 
there  will  not  be  interruptions.  It  is  unreasonable  for  a  utility  to  make  such  a 
promise,  even  if  they  have  checked  all  of  their  systems,  as  they  may  have  to  in¬ 
terrupt  service  due  to  the  failure  of  a  component  not  under  their  control.  In¬ 
stallations  should  consider  having  an  alternate  power  source  on  hand  to  sustain 
core  functions.  Rental  generators  are  a  cost-effective  option  for  short  term  needs. 
However,  it  is  imperative  that  the  units  be  reserved  very  soon  as  research  has 
shown  that  all  available  units  will  soon  be  taken.  An  installation  has  two  main 
options:  to  rent  larger  units  from  a  national  company,  or  to  find  local  rental 
companies  that  can  help  to  piece  together  units.  One  such  national  rental  com¬ 
pany  is  Aggreko  [httpy/www.aggreko.com],  which  has  established  a  national  Y2K 
program  to  facilitate  Y2K  Contingency  Planners.  Industrial  supply  phone  books 
and  Internet  resources  can  help  identify  rental  generators.  One  good  nationwide 
resoxirce  for  installations  wishing  to  rent  from  local  companies  is  the  American 
Rental  Association  website  [httpy/www.ararental.org].  From  this  Web  site,  aU 
nearby  ARA  members  can  be  foimd  and  the  search  can  even  be  narrowed  to  those 
that  list  generators  in  their  inventory.  If  emergency  generators  are  to  be  used, 
the  installation  must  conduct  a  sustained  load  test  for  several  days.  Many 
times,  backup  systems  pass  short-run  maintenance  tests,  but  cannot  operate 
continually  due  to  fouled  cooling  systems. 

Note  that  every  phase  of  the  CompHance  Procedure  should  be  carefiilly  docu¬ 
mented.  This  is  especially  true  of  the  testing,  remediation,  and  implementation 
steps,  which  often  work  in  a  circular  manner.  Documentation  saves  time  and 
provides  a  guide  when  it  is  necessary  to  start  again.  The  documentation  process 
can  be  a  tedious  task,  nearly  as  monumental  as  the  CompHance  Procedure  itself. 

While  the  cost  of  running  and  implementing  a  Y2K  CompHance  Procedure  may 
seem  burdensome,  it  is  better  to  invest  in  Y2K  Readiness  than  to  risk  the  conse¬ 
quences  of  inaction.  Also  reaHze  that  date  change  problems  will  not  all  occur  on 
31  December  1999.  Many  programs  with  forecasting  features  may  produce  erro¬ 
neous  data  months  before  the  crossover  date.  AdditionaUy,  as  the  Year  2000  ap¬ 
proaches,  demand  for  necessary  resources  and  experts  are  Hkely  to  rise  dramati- 
caUy.  It  wiU  Hkely  become  difScult  or  impossible  to  schedule  needed  services  as 
the  critical  date  approaches. 
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6  Y2K  Resources 


The  GSA  is  providing  customers  with  vendor  Y2K  Compliance  information  at  its 
Web  site  [httpy/y2k.lmi.org/gsa/  y2kproducts/].  The  following  website  addresses 
link  to  equipment  manufacturers  that  may  be  involved  in  the  operation  of  energy 
systems,  and  that  provide  access  to  other  informative  Y2K-related  Web  sites. 
Many  of  these  links  open  directly  to  a  company’s  home  page  to  accoimt  for  the 
(likely)  possibility  that  specific  electronic  links  to  Y2K  sites  will  change: 

ABB  Instrumentation. 

http://wwTv.abb.com/ 

Alfa  Laval/ABB  Automation. 

http://www.automation.alfalaval.se/ 

Conunent:  Alfa  Laval  offers  Y2K  Compliance  services  to  its  customers. 

Allen  Bradley  (Rockwell  Automation). 

http://www.ragts.com/webstuf&y2k.nsfiPages/ 

Comment:  Details  known  Y2K  problems  and  solutions  with  their  prod¬ 
ucts.  Site  also  contains  a  Test  Plan  Template. 

Ametek. 

http://www.ametek.com/ametek/default.asp 

Conunent:  Look  imder  “About  AMETEK’  for  Y2K  information. 

Analog  Devices. 

http://www.analog.com/world/quahty/year_issues/product.html 
Comment:  Zero  risk  of  Y2K  problems  with  ADI  products. 

Bristol  Babcock. 

httpvywww.branom.com/COMPANIES/bristol.html 

Comment:  Contains  a  Product  List  of  all  current  and  obsolete  products. 

Also  good  explanation  of  Y2K  technical  problems. 

Elsag-Bailev. 

http://www.ebpa.com/Y2K/ 

Comment:  Site  has  Y2K  turnover  countdown  and  a  Product  Status  List. 
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Fisher-Rosemount. 

http://www.frco.coni/ 

Comment:  Provides  product  information  and  points  of  contact.  (Links  to 
other  Fisher-Rosemount  companies 
httpy/www.frco.com/fr/visit/companys.dgw) 

Foxboro. 

http://www.foxboro.eom/y2000/y2000sysprod.htm 

Comment:  Company  provides  a  chart  of  Y2K  Readiness  Status. 

GE  Information  Services. 

http://www.geis.com/htnil/y2k_faq.html 
Comment:  Informative  site. 

Honeywell. 

httpy/www.iac.honeywell.com/news/1997/yr2000.html 

Comment:  Most  Honeywell  products  are  compliant.  Honeywell  will  work 

with  those  that  aren’t. 

Intellution. 

httpy/www.intellution.com/solutions/year2000  Site  contains  list  of  Prod¬ 
uct  CompHance  and  other  Y2K  information. 

Johnson  Controls. 

httpy/www.j  ci.com/cg-y2k/ 

Comment:  Provides  product  and  system  compliance  information. 
Motorola. 

http://www.mot-sps.com/ 

Comment:  Contains  complete  Y2K  Compliance  information. 

National  Instruments. 

httpy/www.natmst.com/year2000/productsummary.htm 
Comment:  Site  provides  solutions  for  noncomphant  items. 

Omega  Engineering. 

http://y2k.omega.com/ 

Comment:  Omega  provides  a  search  to  find  information  on  specific  prod¬ 
ucts. 
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Rosemount.  Inc. 

http://www.roseniount.coin/y2k/y2kprod.html 
Comment:  Contains  product  status  table. 

Shneider  Automation  (Modicon). 
httpy/www.modicon.cona/ 

Comment:  Go  to  home  page  and  then  to  Year  2000  results. 

Siemens  Energy  and  Automation. 

httpy/www.aut.sea.siemens.com/yr2k/index.htm 
Comment:  Provides  product  information. 

ACSIM. 

httpy/www.hqda.army.inil/acsim/ops/y2k.htm 

Comment:  Provides  information  on  aU  branches  of  the  military  and  re¬ 
lated  Y2K  information.  Go  to  “Y2K  News.” 

Dr.  Ed  Yardeni’s  homepage. 

httpy/www.yardeni.coin/y2kreporter.html 

Comment:  Excellent  site.  Contains  information  on  every  aspect  of  the 
Y2K  Problem. 

North  American  Energy  Reliabihtv  Council. 
http://www.nerc.com/~y2k/ 

Comment:  Excellent  site.  Contains  links  to  government,  industry,  and 
private  sites. 

Vendor2000  product  search. 

httpy/www.vendor2000.com/ 

Comment:  A  fairly  massive  database  of  vendors. 
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7  Status  of  U.S.  Army  Installation  Utility 
Y2K  Compliance  Efforts 

Each  installation  shoxild  be  aware  of  its  electric  and  gas  utilities’  Y2K  Compli¬ 
ance  Status.  Knowledge  of  the  utilities’  standing  will  help  each  installation  to 
better  prepare  for  the  consequences  of  the  year  2000  rollover.  Installations 
should  obtain  a  written  statement  of  their  utilities’  compliance  status  and  plans 
to  enable  installation  utility  managers  to  make  sound  contingency  plans.  Infor¬ 
mation  is  provided  where  it  could  be  obtained  via  the  Internet.  The  Installation 
Utnily  Y2K  Readiness  Table  (found  in  the  Appendix  to  this  report)  is  provided 
for  participants  of  the  Heat  Plant  Modernization  Program.  The  table  also  serves 
as  a  master  example  for  an  overall  Y2K  Readiness  checklist  of  the  installation’s 
heating  and  cooling  system.  As  of  first  quarter  1999,  no  gas  and  electric  utilities 
report  being  Y2K  Compliant.  Most  utilities  predict  completion  of  implementa¬ 
tion  and  testing  sometime  between  Jime  and  December  1999. 

To  add  to  the  difficulties  of  the  compliance  effort,  some  vendors  on  which  the  sys¬ 
tems  operate  continue  to  report  additional  fixes  are  needed.  For  example,  as  of 
April  1999  Microsoft’s  NT  [www.microsoft.com/ntworkstation/]  Terminal  Server 
Edition  (TSE)  was  still  not  Y2K  compliant.  Microsoft  has  posted  a  set  of  Y2K 
fixes  for  TSE,  but  now  admits  that  they  are  inadequate.  This  may  lead  some 
companies  to  think  TSE  is  compliant  when  it  is  in  fact  not.  Microsoft  NT  Service 
Pack  4  [www.microsoft.eom/windows2000/ready/],  scheduled  to  come  out  in  May 
1999,  should  fix  TSE’s  Y2K  compliance  problems.  Some  companies  will  have  to 
do  further  equipment  testing  after  the  installation  of  Service  Pack  4. 
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8  Conclusion 


This  study  has  located  information  to  help  address  the  much  publicized  Y2K 
computer  problem  as  it  relates  to  embedded  systems  in  heating  and  cooling 
plants  at  U.S.  Army  installations.  Information  has  been  foimd  to: 

1.  Help  U.S.  Army  installation  maintenance  personnel  identify  embedded  chip 
equipment  and  common  manufacturers  of  control  equipment  that  may  fail 
aroimd  the  year  2000  (Chapter  5). 

2.  Supply  Internet  links  and  contact  points  for  equipment  manufacturers  (Chapter 

6). 

3.  Identify  the  status  of  Y2K  compliance  for  common  equipment  (Chapter  7). 
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Appendix:  U.S.  Army  Installation  Utility 

Y2K  Readiness  Table 
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